Back to Hub

Privacy Policy

Last updated

Tsinglin is a collection of browser-based tools and games. This page explains, in plain language, what actually happens to your data when you use it — including the few cases where something does leave your device.

It describes the code as it is today, not as we would like it to be. Where a claim is narrower than it sounds, we have said so.

  • Tools run entirely in your browser. The text, numbers and files you put into a tool are processed on your own device and are never sent to us.
  • We run no analytics, no tracking pixels and no advertising scripts. We set no cookies.
  • Our servers never receive the content you enter into a tool.
  • Three things do involve third parties, and each is described in full below: the media and document converters download their processing engines from public CDNs, which therefore see your IP address; multiplayer games use accounts stored with Supabase; and our hosting provider Cloudflare handles all requests to this site.

Tsinglin (Tsinglin Tools) operates this website. For any question about this policy, or to exercise any of the rights described below, contact legal@tsinglin.tech. For general support, contact support@tsinglin.tech.

Every tool under /hot-tools/ is a self-contained page that performs its work using JavaScript APIs built into your browser — text handling, arithmetic, the Canvas API for images, and WebAssembly modules served from this domain for heavier document and media work.

When you paste text, upload an image or type a number into a tool, that input is read by the page running on your machine. It is not posted to a server, not written to a database, and not visible to us. We could not read it even if we wanted to, because it never reaches us.

The same applies to the image, audio, video and document converters under /free-convert/. The file you select is read locally and the result is generated locally.

This is the one place where using a tool causes a request to a third party, and it is worth being precise about it.

The media and document tools depend on open-source engines that are too large to justify shipping to every visitor. They are fetched from public content delivery networks:

  • The audio and video converters load FFmpeg from unpkg.com.
  • The document converter loads the MuPDF engine from jsDelivr, which may be served from cdn.jsdelivr.net, fastly.jsdelivr.net or gcore.jsdelivr.net.
  • The image, audio and video converters also load smaller libraries from cdn.jsdelivr.net — JSZip, jsPDF, heic2any, UTIF, gifshot and lamejs. Some of these load as soon as the page opens, rather than on first use.

What they receive: the standard information any web request carries, which includes your IP address, your browser user-agent string, and which file was requested. Because some of these libraries load on page open, that request can happen even if you never convert anything.

What they do not receive: your file. The contents of the document, image, audio or video you are converting are never part of those requests — only the engine code is.

We are telling you this because a request to a third-party CDN is still a request to a third party, even when your file stays on your device. If you would rather avoid it entirely, the tools that do not need these engines — the text, developer, calculator and lookup tools — make no such request.

We set no cookies. We do use your browser’s local storage, for two purposes:

  • Game progress. Single-player games save your progress and best scores in local storage under keys beginning with tsinglin.game. This data stays on your device and is never transmitted.
  • Session persistence for multiplayer games. If you sign in to play online, your authentication token is stored in local storage so that you stay signed in between visits.

Eight games on this site are playable against other people: Chinese Chess, Go, Gomoku, Reversi, Uno, Dou Dizhu, Army Chess and the battle game. These require an account, because your opponent needs to know who they are playing.

If you create an account, we store the following on our behalf by Supabase (see below):

  • Your email address, used to sign in and to send account confirmation.
  • Your password, stored only as a cryptographic hash. We never see your password in plain text.
  • Your display name and avatar choice.
  • Your game record: score, wins, losses, and the time of your last update.
  • The moves and room state needed to run a live match, which pass through Supabase Realtime while the match is in progress.

If you do not sign in, nothing about your play is sent anywhere. The other fifteen games, and every tool on the site, work fully without an account and without a signup.

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

  • Performance of a contract (Article 6(1)(b)) — creating and operating your multiplayer account, and providing the game you asked for.
  • Legitimate interests (Article 6(1)(f)) — keeping the service secure and preventing abuse, such as blocking attempts to disrupt live matches.
  • Consent (Article 6(1)(a)) — any future advertising or analytics. Nothing of that kind is active today, and we would ask first.

We do not sell your personal data, and we do not share it with anyone for advertising purposes. There is no advertising network on this site today.

  • Cloudflare, Inc. — hosting and content delivery for this website. Cloudflare processes every request to the site, including your IP address, in order to serve it and to protect against attacks.
  • Supabase, Inc. — authentication, database and realtime messaging for the multiplayer games. Supabase stores the account and game-record data listed above.

This site sets no cookies. If we ever introduce advertising, which the reserved spaces on the page anticipate, that would change: advertising networks typically set cookies and similar identifiers, and they would require your consent in the EEA and UK before doing so.

We have deliberately left the consent mechanism in place but inactive. Before any such script runs, this page will be updated and a consent request will appear. Consent will never be assumed.

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where consent is the basis.

If you are in California, you have the right to know what categories of personal information we collect, to request deletion, and to be free from discrimination for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

To make a request, email legal@tsinglin.tech. We will respond within the timeframe the applicable law requires, generally within 30 days.

Account data is kept for as long as your account exists. If you ask us to delete your account, we will delete the associated profile and game record. Note that the self-service deletion button does not exist yet — deletion is currently handled by request, which is why the contact address above matters.

Game progress held in your browser’s local storage is removed when you clear your browser data for this site, and we have no copy of it to delete.

This site is not directed at children. We do not knowingly collect personal data from children under 13, or under 16 where the GDPR sets that threshold. Multiplayer accounts are not intended for children. If you believe a child has created an account, contact us and we will remove it.

Our processors, Cloudflare and Supabase, may store and process data in countries other than your own, including the United States. Where personal data protected by the GDPR is transferred out of the EEA or the UK, the transfer relies on the European Commission’s Standard Contractual Clauses or an equivalent safeguard under the providers’ data processing terms.

The site is served over HTTPS. Passwords are hashed and never stored in readable form. We collect as little as the multiplayer games can function with.

No system is perfect, and we will not claim otherwise. If you discover a security problem, please report it to support@tsinglin.tech.

If this policy changes, the revision date at the top of the page changes with it. Material changes — in particular any change to the third-party section above — will be reflected here before they take effect.

📢 [AD_SLOT] · 728x90 Responsive Display
Copied to clipboard!